In re Appln. of Frisch et al. 

Application No. 10/828,729 

Response to Office Action of April 26, 2007 

Amendments to the Claims 

This listing of claims will replace all prior versions and listings of claims in the 
application. 

Claim 1 (original): A method of electronically signing documents, comprising the steps of 
generating a token of delegation from a first signatory to a second signatory, and associating 
the delegation token with a document signed electronically by means of a cryptographic key 
of the second signatory, wherein the delegation token contains delegation data electronically 
signed for the first signatory, wherein the delegation data include an identifier of the second 
signatory, and wherein the delegation token is generated by a server in response to a request 
sent by the second signatory in connection with the signing of the document. 

Claim 2 (original): A method according to claim 1, wherein the electronic signature 
performed by means of the cryptographic key of the second signatory is applied to the 
document accompanied by the delegation token. 

Claim 3 (original): A method according to claim 1, wherein the electronic signature 
performed by means of the cryptographic key of the second signatory is applied on the one 
hand to the document and on the other hand to authenticated attributes including the 
delegation token. 

Claim 4 (original): A method according to claim 1, wherein the delegation token is 
associated with the document signed by means of the cryptographic key of the second 
signatory without itself being signed by means of the cryptographic key of the second 
signatory. 

Claim 5 (original): A method according to claim 1, wherein the delegation data further 
include data describing a validity period of the delegation token. 

Claim 6 (original): A method according to claim 1, wherein the delegation data further 
include description data of delegated powers conferred by the token. 
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Claim 7 (original): A method according to claim 1, wherein the delegation token further 
comprises timestamp information for the token. 

Claim 8 (original): A method according to claim 1, wherein a revocation server is 
provided for storing information on possible revocation of the delegation token by the first 
signatory. 

Claim 9 (original): A method according to claim 8, wherein the delegation data further 
include an access address to the revocation server. 

Claim 10 (original): A method according to claim 1, wherein the delegation data are signed 
electronically by means of a cryptographic key of the first signatory. 

Claim 1 1 (original): A method according to claim 1, wherein the delegation data further 
include an identifier of the first signatory and are signed electronically by means of a 
cryptographic key of a third party. 

Claim 12 (original): A method according to claim 1, wherein the delegation token is 
associated by the second signatory with the document signed electronically by means of a 
cryptographic key of the second signatory. 

Claim 13 (original): A method according to claim 1, wherein the delegation token is sent to 
the second signatory by the server. 

Claim 14 (original): A method according to claim 13, wherein the delegation token is 
associated with the signed document by an applet downloaded from the server to a station of 
the secondary signatory. 
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Claim 15 (original): A method according to claim 1, wherein the second signatory signs the 
document electronically and submits the signed document to the server, and wherein the 
server associates the signed document with the delegation token. 

Claim 16 (original): A method according to claim 1, wherein said request is accompanied 
by data depending on the document to be signed which are included in said delegation data to 
generate the delegation token. 

Claim 17 (original): A method according to claim 16, wherein said data depending on the 
document to be signed comprise a code obtained by hashing the document. 

Claim 18 (original): A computer device for electronic signature of documents by a second 
signatory delegated by a first signatory, comprising means for electronically signing a 
document by means of a cryptographic key of the second signatory, means for obtaining a 
token of delegation from the first signatory to the second signatory, and means for associating 
the delegation token with the signed document, wherein the delegation token comprises 
delegation data electronically signed for the first signatory, wherein the delegation data 
include an identifier of the second signatory, and wherein the means for obtaining the 
delegation token are adapted to send a request relating to the signing of the document to a 
server and to receive the token in response to said request. 

Claim 19 (original): A device according to claim 18, wherein the signature means are 
adapted to sign electronically the document accompanied by the delegation token, by means 
of the cryptographic key of the second signatory. 

Claim 20 (original): A device according to claim 18, wherein the signature means are 
adapted to sign electronically on the one hand the document and on the other hand 
authenticated attributes including the delegation token, by means of the cryptographic key of 
the second signatory. 
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Claim 21 (original): A device according to claim 18, wherein the delegation data further 
include data describing a validity period of the delegation token. 

Claim 22 (original): A device according to claim 18, wherein the delegation data further 
include data describing delegated powers conferred by the token. 

Claim 23 (original): A device according to claim 18, wherein the delegation data further 
include an access address to a revocation server storing information on possible revocation of 
the delegation token by the first signatory. 

Claim 24 (original): A device according to claim 18, wherein the delegation token further 
comprises timestamp information for the token. 

Claim 25 (original): A device according to claim 18, wherein said request is accompanied 
by data depending on the document to be signed. 

Claim 26 (original): A delegation server for use in the electronic signing of documents by a 
second signatory delegated by a first signatory, comprising means for generating a token of 
delegation from the first signatory to the second signatory in response to a request sent by the 
second signatory in connection with the signing of a document, wherein the delegation token 
contains delegation data electronically signed for the first signatory, and wherein the 
delegation data include an identifier of the second signatory. 

Claim 27 (original): A server according to claim 26, further comprising means for sending 
the delegation token to the second signatory for association with the document signed 
electronically by means of a cryptographic key of the second signatory. 

Claim 28 (original): A server according to claim 27, further comprising means for 
uploading an applet to a station of the secondary signatory in order to control the association 
of the delegation token with the electronically signed document. 
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Claim 29 (original): A server according to claim 26, wherein said request is accompanied 
by data depending on the document to be signed which are included in said delegation data to 
generate the delegation token. 

Claim 30 (original): A server according to claim 26, wherein said data depending on the 
document to be signed comprise a code obtained by hashing the document. 

Claim 31 (original): A server according to claim 26, further comprising means for receiving 
the signed document from the second signatory, and means for associating the signed 
document with the delegation token. 

Claim 32 (original): A server according to claim 26, wherein the delegation data further 
include data describing a validity period of the delegation token. 

Claim 33 (original): A server according to claim 26, wherein the delegation data further 
include description data of delegated powers conferred by the token. 

Claim 34 (original): A server according to claim 26, wherein the delegation token further 
comprises timestamp information for the token. 

Claim 35 (original): A server according to claim 26, wherein the delegation data further 
include an access address to a revocation server provided for storing information on possible 
revocation of the delegation token by the first signatory. 

Claim 36 (original): A server according to claim 26, wherein the delegation data further 
include an identifier of the first signatory and are signed electronically by means of a 
cryptographic key of a third party. 

Claim 37 (original): A computer program product to be installed in a computer device for 
electronic signature of documents by a second signatory delegated by a first signatory, 
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comprising instructions for carrying out the following steps when the program is run by 
processing means of said device: 

- sending a request to a delegation server in connection with the signing of a 
document; 

- receiving a token of delegation from a first signatory to a second signatory, 
generated by the server in response to said request, wherein the delegation token 
contains delegation data electronically signed for the first signatory, wherein the 
delegation data include an identifier of the second signatory; 

- electronically signing the document by means of a cryptographic key of the second 
signatory; and 

- associating the delegation token with the signed document. 

Claim 38 (original): A computer program product according to claim 37, wherein the 
electronic signature performed by means of the cryptographic key of the second signatory is 
applied to the document accompanied by the delegation token. 

Claim 39 (original): A computer program product according to claim 37, wherein the 
electronic signature performed by means of the cryptographic key of the second signatory is 
applied on the one hand to the document and on the other hand to authenticated attributes 
including the delegation token. 

Claim 40 (original): A computer program product according to claim 37, wherein the 
delegation token is associated with the document signed by means of the cryptographic key 
of the second signatory without itself being signed by means of the cryptographic key of the 
second signatory. 

Claim 41 (original): A computer program product according to claim 37, including an 
applet downloaded from the server to said computer device. 
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Claim 42 (original): A computer program product according to claim 37, wherein said 
request is accompanied by data depending on the document to be signed which are included 
in said delegation data to generate the delegation token. 

Claim 43 (original): A computer program product according to claim 42, wherein said data 
depending on the document to be signed comprise a code obtained by hashing the document. 

Claim 44 (original): A computer program product to be installed in a delegation server 
involved in the electronic signature of documents by a second signatory delegated by a first 
signatory, comprising instructions for carrying out the following steps when the program is 
run by processing means of said server: 

- receiving a request from the second signatory in connection with the signing of a 
document; and 

- generating a token of delegation from a first signatory to a second signatory in 
response to said request, to be associated with the document signed electronically by 
means of a cryptographic key of the second signatory, 

wherein the delegation token contains delegation data electronically signed for the first 
signatory, wherein the delegation data include an identifier of the second signatory. 

Claim 45 (original): A computer program product according to claim 44, further 
instructions means for sending the delegation token to the second signatory for association 
with the document signed electronically by means of the cryptographic key of the second 
signatory. 

Claim 46 (original): A computer program product according to claim 45, further comprising 
instructions for uploading an applet to a station of the secondary signatory in order to control 
the association of the delegation token with the electronically signed document. 

Claim 47 (original): A computer program product according to claim 44, wherein said 
request is accompanied by data depending on the document to be signed which are included 
in said delegation data to generate the delegation token. 
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Claim 48 (original): A computer program product according to claim 44, wherein said data 
depending on the document to be signed comprise a code obtained by hashing the document. 

Claim 49 (original): A computer program product according to claim 44, further comprising 
instructions for receiving the signed document from the second signatory, and instructions for 
associating the signed document with the delegation token. 

Claim 50 (original): A computer program product according to claim 44, wherein the 
delegation data further include data describing a validity period of the delegation token. 

Claim 51 (original): A computer program product according to claim 44, wherein the 
delegation data further include description data of delegated powers conferred by the token. 

Claim 52 (original): A computer program product according to claim 44, wherein the 
delegation token further comprises timestamp information for the token. 

Claim 53 (original): A computer program product according to claim 44, wherein the 
delegation data further include an access address to a revocation server provided for storing 
information on possible revocation of the delegation token by the first signatory. 

Claim 54 (original): A computer program product according to claim 44, wherein the 
delegation data further include an identifier of the first signatory and are signed electronically 
by means of a cryptographic key of a third party. 
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